← back to the console

Kudzayi Mwashita

Network Security Engineer

Discovery Bay, CA  ·  kudzai.mwashita@gmail.com  ·  linkedin.com/in/kudzayiMwashita

Download PDF →

Network security engineer with six-plus years running production infrastructure for Amazon fulfillment operations across 30+ sites. Cisco and Juniper at the core, Junos firewalls at the edge, segmentation and ACL policy as the control, and packet-level forensics when that is not enough. Finishing an MS in Computer Science with a cybersecurity concentration at Arizona State, December 2026. Four years writing C# before that, on a system still in production — so the automation is written by someone who has shipped software for a living.

Career

  1. December 2019 – Present

    Amazon

    IT Support Engineer — Network Infrastructure and Security  ·  San Francisco, CA

    Thirty-plus buildings ship on this network. When it degrades, they stop.

    • Design, deploy and maintain production network infrastructure across 30+ Amazon Fulfillment Center (FC), Sub Same Day (SSD) and Amazon Logistics (AMZL) sites on Cisco and Juniper platforms, including SD-WAN connectivity and Junos-based firewalls.
    • Enforce network segmentation and least-privilege access by configuring and tuning firewall policies and Access Control Lists (ACLs), closing security gaps before they reach production rather than after.
    • Hold the escalation seat in a 24/7 on-call rotation for network and security incidents across FC, SSD and AMZL facilities, containing breaches and restoring service inside a one-hour response target.
    • Automate network and security operations in Python, Bash and PowerShell, cutting manual configuration work by 34.7% and standardising device hardening across every site.
    • Keep the Amazon Robotics network environment up, sustaining the connectivity that automated material-handling and sortation depend on — when it drops, the floor stops moving and the site misses its ship window.
    • Run packet-level root-cause analysis with Wireshark, SolarWinds and Cisco Prime on routing, latency and connectivity failures, on systems where the cost of guessing is a missed delivery promise.
    • Built and delivered technical training for 25 engineers on firewall administration and infrastructure troubleshooting, and act as the translation layer between network constraints and the operations teams who have to live with them.
  2. 2014 – 2018

    Volkswagen Zimbabwe

    Software Engineer  ·  Harare, Zimbabwe

    Four years of C# before networking. We replaced Microsoft Dynamics with something built for how dealerships actually work, and it is still running.

    • Worked on the engineering team that replaced Microsoft Dynamics NAV with a custom integrated business management system — ERP and CRM in one product — written in C# on .NET and built around how Volkswagen dealerships actually operate. It is still in production.
    • Supported the Dynamics NAV deployment it replaced, writing custom modules in C# for the processes the stock product could not cover.
  3. Expected December 2026

    Master of Science, Computer Science — Cybersecurity Concentration

    Arizona State University, Tempe, AZ

  4. Completed

    Bachelor of Science, Computer Science

    Colorado State University, Fort Collins, CO

Certifications

Selected work

Trading app — multi-asset signal platform (Python, TypeScript)

Full-stack day-trading platform: an async FastAPI backend (~8,500 lines of Python) on PostgreSQL, Redis and SQLAlchemy 2.0, a React/TypeScript web client, and a React Native app sharing the same API. Five market-data providers — Yahoo Finance, CoinGecko, Alpha Vantage, Polygon, TradingView — sit behind one interface with an aggregator in front, and brokers behind another, so paper trading is the default path rather than a mode you have to remember to switch on. Signals combine 15+ technical indicators and candlestick pattern recognition with a scikit-learn price-direction model. JWT auth, Alembic migrations, WebSocket streaming, Docker Compose for the whole stack.

Private repository — happy to walk through it

Pharmaceutical supply chain provenance (Solidity)

Graduate coursework, ASU CSE 540 Engineering Blockchain Applications, Spring 2026, Group 12 (co-author). Solidity contracts tracking custody of pharmaceutical batches across manufacturer, distributor and pharmacy, so counterfeit inventory cannot be inserted without breaking the signature chain, with a TypeScript application layer around them.

github.com/IWantToHelp/CSE540-Spr26-Group-12 →

kudzayimwashita.com — this site

An interactive network-recon console that is a Python program: CPython compiled to WebAssembly via PyScript/Pyodide, with the game engine kept as a browser-free module so it runs under pytest. No hand-written JavaScript.

Technical skills

Network Infrastructure: Cisco IOS, Juniper Junos, SD-WAN, routing and switching, VLANs, network segmentation, Access Control Lists (ACLs), Cisco Wireless LAN Controller (WLC), network design and hardening

Firewalls and Security Appliances: Juniper SRX, Cisco ASA, Palo Alto, Fortinet, firewall policy management, least-privilege access

Monitoring and Analysis: Wireshark, SolarWinds, Cisco Prime, Nagios, packet capture analysis, root-cause analysis

Operating Systems: Windows Server, Red Hat Enterprise Linux, Ubuntu, Active Directory

Automation and Development: Python, Bash, PowerShell, C#/.NET, C/C++, Java, network automation, configuration management, Microsoft Dynamics NAV, ERP and CRM systems

Security Operations: Incident response, breach containment, vulnerability management, endpoint security, 24/7 on-call escalation, technical documentation

Frameworks and Compliance: NIST Cybersecurity Framework, ISO 27001, CIS Controls, GDPR, HIPAA

Security Tooling (coursework and lab environments): Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), Snort, Suricata, Nessus, Kali Linux